Clerks are hitting a fake benefits-enrollment site. The analyst needs URLs, categories, and proxy users. Which ES dashboard family is the right place?
Select an answer to reveal the explanation.
Short Explanation
A fake benefits site is a web question—URLs, categories, who hit the proxy. That is Web Intelligence, not the identity-anomaly or malware pane as the first stop. Don't file every URL as a risk object either.
Full Explanation
Web Intelligence and the Web security-domain dashboards are built for URL, category, and proxy-user investigations, including phishing or fake civic sites such as a bogus benefits-enrollment page. Access Anomalies and Endpoint may later add account or host context, but they are not the URL and category workspace. Risk Analysis shows scored objects, not a substitute web investigation dashboard.